Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
File: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft (raw, json)
Hash identifier: uvivMxHO4NzLoBXisHvKEw5g2E17BKFx/FmtRAS8jdU=
Subject key identifier: A8:E0:A6:7D:49:26:B7:4A:1F:04:71:8D:00:63:98:38:E7:7B:2A:A8
Authority key identifier: FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
Certificate issuer: /CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Certificate serial: 019872CF1FB083D139CD3AABD7D71439E95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
Manifest number: 13B8
Signing time: Mon 04 Aug 2025 02:00:33 +0000
Manifest this update: Mon 04 Aug 2025 02:00:33 +0000
Manifest next update: Tue 05 Aug 2025 02:00:33 +0000
Files and hashes: 1: _LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl (hash: AALGCp0yW4bQDP/Gjf4bvGaHeJn+OSLG2jRiD37ur8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:1f:b0:83:d1:39:cd:3a:ab:d7:d7:14:39:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb3299f05c20d63959ce7781b5a8e072f57ccb4
Validity
Not Before: Aug 4 02:00:33 2025 GMT
Not After : Aug 5 02:00:33 2025 GMT
Subject: CN=a8e0a67d4926b74a1f04718d00639838e77b2aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:9c:32:a0:d4:be:67:3c:e6:28:a9:30:40:
a1:c8:00:c9:61:79:dc:f8:dd:5f:bf:c7:bc:8a:f4:
5f:f7:90:d1:cd:4d:a7:d9:46:92:d5:37:6f:64:c0:
3b:e4:d3:2c:8d:fc:e7:6f:c8:09:fd:84:e2:b7:c0:
67:c6:ca:a1:af:73:83:a6:2e:18:af:11:08:93:ce:
ce:bd:3c:4d:11:de:fb:76:5c:ea:00:65:ac:e0:c6:
2b:61:62:69:b2:ae:f8:62:26:85:84:2d:c1:59:b3:
62:86:73:af:56:bc:26:40:e3:c8:70:42:a7:19:c7:
f2:cc:66:f7:85:0c:5c:00:ff:15:f2:9e:06:55:8b:
85:69:6d:3e:60:12:e1:52:51:c0:8f:a9:e9:31:ff:
e8:5a:d9:ee:37:c3:69:d5:65:2f:40:21:e0:be:d5:
07:97:ff:e8:8e:5b:d4:6d:73:7c:e5:f2:b6:af:9b:
c7:02:9f:ec:6b:99:a5:53:84:3e:1f:ef:c1:cb:38:
2d:5f:bf:c9:01:05:9d:de:d0:a3:2b:73:fd:4e:cf:
0b:0b:ee:b0:7d:ee:14:2b:c2:56:10:50:80:7e:0e:
ae:e8:0e:25:3c:61:f3:99:ab:c1:d4:9c:8f:2c:1a:
0c:fe:94:0b:f9:b5:af:95:15:d7:52:83:32:57:f0:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E0:A6:7D:49:26:B7:4A:1F:04:71:8D:00:63:98:38:E7:7B:2A:A8
X509v3 Authority Key Identifier:
keyid:FC:B3:29:9F:05:C2:0D:63:95:9C:E7:78:1B:5A:8E:07:2F:57:CC:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/fd52f7-0ffa-4f1d-9d02-147d486f4050/1/_LMpnwXCDWOVnOd4G1qOBy9XzLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:33:23:f3:ac:06:a1:f1:10:64:2b:7a:9f:cf:c0:9c:fd:86:
d3:6b:c7:9b:9a:59:c5:1a:44:6b:49:b2:a0:de:cb:25:e2:5f:
22:20:2c:ea:3f:e3:9f:eb:47:15:71:ea:b0:9b:72:4d:dd:18:
ee:2c:ac:b7:41:6f:06:e7:17:0b:8d:9d:06:63:9a:0b:6c:99:
95:9b:2b:82:0d:ee:bb:a7:e2:be:06:00:23:ed:c6:39:54:07:
70:4b:fd:62:7d:8b:9c:b4:8a:97:2e:86:38:05:94:d1:b4:df:
5d:13:a1:10:ce:81:be:2d:89:3a:5f:e6:8b:a0:dc:71:a4:30:
c0:04:a6:ba:21:6f:9b:bf:9d:38:62:6a:88:3f:cb:74:84:27:
82:9c:f0:19:46:08:f4:7c:4c:9a:a7:c9:48:0b:c3:41:8d:86:
4a:15:c2:c5:f1:ca:39:de:f9:f3:ac:f1:ce:c3:12:80:15:5f:
08:39:b2:fc:3f:88:88:b9:3a:66:82:02:36:2c:5e:16:31:c5:
b0:37:94:32:c0:60:71:0b:82:86:99:5f:d6:35:ce:aa:76:19:
22:62:1e:9f:4b:42:c8:92:d0:47:53:88:70:f1:52:50:1c:73:
71:09:f3:c9:e6:d0:c1:ab:1a:22:81:2e:6c:24:41:c5:37:14:
41:8e:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:55 2025 by rpki-client